images.icetv.com.au SSL broken

[TheXMLGuy]

Hi,

The SSL certificate chain on the images server is incomplete. 

The server is not sending the intermediate certificate (Sectigo Public Server Authentication CA DV R36). In openssl output, the "Certificate chain" shows two identical copies of the leaf certificate instead of leaf + intermediate.  The outcome is that browsers will often ignore the error, but strict CLI tools like curl, wget, openssl will all fail.  This breaks most open source tools trying to retrieve these logos.

A report here: https://www.ssllabs.com/ssltest/analyze.html?d=images.icetv.com.au&s=18.155.173.11&latest

I'm not sure how long this has been an issue, as the logos have been cached until I did a fresh install of my setup.

Whilst we're on the topic of broken stuff, your 'contact us' page is also broken -- the captcha incorrectly states a failed match.

Any help would be appreciated.

Matt.

[Daniel Hall at IceTV]

Hi Matt,

Thanks for the heads up, I won't be at a computer long enough today to get a fix in place, but will get it updated asap (we also need to get a more streamlined process in place ready for the new 47 day expiry for certificates).

The contact us form is a little trickier due to some server upgrades that are in process, but that will get sorted mid to late next week. In the meantime you can always email support@icetv.com.au

[TheXMLGuy]

Thanks Daniel!

[TheXMLGuy]

I can confirm this is now working.  Thanks so much for fixing it, Daniel!